Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #231266

Re: Sudo ... use or delete?

From john doe <johndoe65534@mail.com>
Newsgroups linux.debian.user
Subject Re: Sudo ... use or delete?
Date 2021-01-29 17:30 +0100
Message-ID <BCEOK-AF-5@gated-at.bofh.it> (permalink)
References <BCDpD-84t-3@gated-at.bofh.it> <BCElH-bc-7@gated-at.bofh.it> <BCElH-bc-11@gated-at.bofh.it> <BCElH-bc-9@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On 1/29/2021 4:57 PM, Antonio Russo wrote:
>
>
> On 1/29/21 8:54 AM, john doe wrote:
>> In the case of sudo, you could deny the use of sudo by removing all
>> users from the sudoers file or by denying sudo access  explicitly in the
>> sudoers file.
>>

Also, removing all users from the sudo group.

>> --
>> John Doe
>>
>
> As I understand it, this would not have protected against the recent local
> privilege escalation bug in sudo.  If you're interested in improving
> security, the desire is to reduce the total amount of privileged code on
> the machine.
>

The bug you are referring to is already corrected (1).

1)  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3156

--
John Doe

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Sudo ... use or delete? Peter Ehlert <peter@sdi-baja.com> - 2021-01-29 16:00 +0100
  Re: Sudo ... use or delete? Greg Wooledge <wooledg@eeg.ccf.org> - 2021-01-29 16:00 +0100
  Re: Sudo ... use or delete? Antonio Russo <aerusso@aerusso.net> - 2021-01-29 16:20 +0100
    Re: Sudo ... use or delete? <tomas@tuxteam.de> - 2021-01-29 16:50 +0100
      Re: Sudo ... use or delete? Eike Lantzsch <zp6cge@gmx.net> - 2021-01-29 18:40 +0100
        Re: Sudo ... use or delete? Roberto C. Sánchez <roberto@debian.org> - 2021-01-29 19:30 +0100
          Re: Sudo ... use or delete? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-29 20:50 +0100
  Re: Sudo ... use or delete? Teemu Likonen <tlikonen@iki.fi> - 2021-01-29 17:00 +0100
    Re: Sudo ... use or delete? john doe <johndoe65534@mail.com> - 2021-01-29 17:00 +0100
      Re: Sudo ... use or delete? Antonio Russo <aerusso@aerusso.net> - 2021-01-29 17:00 +0100
        Re: Sudo ... use or delete? john doe <johndoe65534@mail.com> - 2021-01-29 17:30 +0100
    Re: Sudo ... use or delete? Peter Ehlert <peter@sdi-baja.com> - 2021-01-29 18:10 +0100
  Re: Sudo ... use or delete? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-01-29 20:50 +0100
    Re: Sudo ... use or delete? Peter Ehlert <peter@sdi-baja.com> - 2021-01-30 14:30 +0100

csiph-web